1 Topic by Bronko

  • Bronko
  • Member
  • Offline
  • Registered: 2009-10-20
  • Posts: 113

Topic: sending without smtp login

======== Required information ====
- iRedMail version (check /etc/iredmail-release): 0.9.0
- Linux/BSD distribution name and version: Ubuntu 12.04.5 LTS
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): LDAP
- Web server (Apache or Nginx): Apache
- Manage mail accounts with iRedAdmin-Pro? Yes
- Related log if you're reporting an issue:
====

Why its possible to send emails to local mail accounts by any outside smtp client without smtp login before? To email accounts on other mail server fails, because of Relay access denied, for sure.

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,165

Re: sending without smtp login

Try to upgrade iRedAPD to the latest release (1.9.1), then enable its plugin 'reject_sender_login_mismatch' in /opt/iredapd/settings.py.

3 Reply by Bronko

  • Bronko
  • Member
  • Offline
  • Registered: 2009-10-20
  • Posts: 113

Re: sending without smtp login

ZhangHuangbin wrote:

Try to upgrade iRedAPD to the latest release (1.9.1), then enable its plugin 'reject_sender_login_mismatch' in /opt/iredapd/settings.py.

It is, but I configured to ignore my whole domain:

ALLOWED_LOGIN_MISMATCH_SENDERS = ['mydomain.com', 'shadowAddress']

Sorry, doesn't checked/remembered it before posting.

Tutorial: http://www.iredmail.org/docs/manage.iredapd.html

4 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,165

Re: sending without smtp login

Does it solve your issue?